North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance.

North Korea-linked ScarCruft’s Ruby Jumper uses Zoho WorkDrive C2 and USB malware to breach air-gapped systems for ...

IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...

A convincing lookalike of the popular Huorong Security antivirus has been used to deliver ValleyRAT, a sophisticated Remote Access Trojan (RAT) built on the Winos4.0 framework, to users who believed ...

ClickFix Campaign Abuses Compromised Sites to Deploy MIMICRAT Malware | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software ...

A fake CAPTCHA scam is tricking Windows users into running PowerShell commands that install StealC malware and steal passwords, crypto wallets, and more.

Complaining about Windows 11 is a popular sport among tech enthusiasts on the Internet, whether you’re publicly switching to Linux, publishing guides about the dozens of things you need to do to make ...

The new year has brought new bugs to Windows. Many of the latest bugs were caused by the January update. Some bugs have been fixed, but others remain unresolved. A new year, a new round of bugs to ...

Windows Recall is one of the biggest AI features Microsoft has added to Windows 11. It’s useful, but it comes with some privacy trade-offs. If you're a Windows 11 user, and specifically an owner of a ...

A former Microsoft developer thinks Windows sucks and explains why. Windows has become a marketing tool to sell Microsoft services. A Microsoft exec calls Windows an agentic OS, with brutal responses.

Today, Microsoft announced the general availability of Windows 11 25H2, also known as Windows 11 2025 Update. Windows 11 25H2 is a minor update, and it shares the same platform release as Windows 11 ...

Abstract: Executing a macro from VBA is a crossroad that is very well used in Offensive security since attackers can run the application directly on memory to avoid security alerts. This paper is a ...